skills.rest
mejango
mejangoCOMMUNITY
Explore all skills by this author →
𝕏@me_jangoGitHub

constant-time-analysis

Detect timing side-channel vulnerabilities in cryptographic assembly and bytecode.

Updated Jan 17, 2026
Search Tags:#analysis#cryptography#timing#vulnerabilities#bytecode#assembly#constant-time
One-click install
npx skills add https://github.com/mejango/juicy-vision --skill constant-time-analysis-mejango
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: constant-time-analysis
Source: https://github.com/mejango/juicy-vision/tree/main/.claude/plugins/constant-time-analysis/skills/constant-time-analysis
Command: npx skills add https://github.com/mejango/juicy-vision --skill constant-time-analysis-mejango

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Detects timing side-channel vulnerabilities in cryptographic code.

Core Features & Use Cases

  • Detect timing vulnerabilities in cryptographic implementations across languages and targets
  • Guide constant-time fixes and safe comparisons
  • Provide integration guidance for CI and code review
  • Cross-architecture analysis support (x86_64 to ARM64 and beyond)

Quick Start

Activate this skill to assess code for timing leaks and receive recommended mitigations.

Frequently Asked Questions about constant-time-analysis

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect timing side-channel vulnerabilities in cryptographic code?▼

Detect timing side-channel vulnerabilities by analyzing compiled assembly or bytecode for variable-time instructions, secret-dependent branches, and unsafe comparisons, then applying guided constant-time replacements and secure patterns.

What is a constant-time analysis and when do I need it for cryptography?▼

Constant-time analysis is the detection of timing leaks in cryptographic implementations. You need it when processing secrets to prevent attackers from measuring execution time to recover sensitive data across any supported architecture.

How do I fix variable-time instructions and secret-dependent branches found in crypto code?▼

Fix variable-time instructions and secret-dependent branches by following the skill's guided constant-time replacements and secure patterns to eliminate data-dependent execution paths in your cryptographic implementations.

Can I analyze timing leaks across x86_64, ARM64, and RISC-V architectures?▼

Yes, timing analysis supports cross-architecture targets including x86_64, ARM64, and RISC-V, and applies to compiled outputs from C/C++, Go, Rust, Java, Python, JavaScript, PHP, Ruby, Kotlin, and Swift.

How do I integrate timing side-channel detection into CI and code review workflows?▼

Integrate timing side-channel detection into CI and code review by activating the analysis to assess code for timing leaks automatically, receiving recommended mitigations to block vulnerable code from merging.

Related Skills

Explore More Software Engineering Skills→
ofelixdevofelixdev

constant-time-analysis

Detect timing side-channel vulnerabilities in cryptographic code across multiple programming languages.

Community
Advanced
manuelbrandner85manuelbrandner85

constant-time-analysis

Detect variable-time instructions in assembly or bytecode for cryptographic implementations.

Community
Advanced
balic-AI-ML-R-D-Resourcesbalic-AI-ML-R-D-Resources

security-constant-time-analysis

Detect timing side-channel vulnerabilities in source code and suggest constant-time APIs.

Official
Intermediate
andrescardonas7andrescardonas7

constant-time-testing

Detect timing side-channel vulnerabilities in cryptographic implementations.

Community
Advanced